MpCmdRun.exe
Microsoft Malware Protection Command Line Utility by Microsoft Corporation (Signed)
| Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| MD5: | 6bd4d7f68924301051c22e8a951aecba |
| SHA1: | 2ae2a6b863616b61ccb550fc1a145ae025896de1 |
| SHA256: | 9afd12eede0db98a35aba52f53041efa4a2f2a03673672c7ac530830b7152392 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is MpCmdRun.exe?
You can use this tool to automate and troubleshoot Microsoft Antimalware Service. So for instance if you wish to do a quick scan from the command line, you can use -Scan 1 parameter. Microsoft Security Essentials is efficient and compact. Scans and updates are scheduled to run when the PC is idle and the software works in a way that your PC is still snappy when you’re using it.
About MpCmdRun.exe (from Microsoft Corporation)
“There are a host of nasty intruders on the Internet including viruses, trojans, worms and spyware. Microsoft Security Essentials offers award-winning protection against these intruders without getting”
Details
| File name: | mpcmdrun.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft Malware Protection Command Line Utility |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Program Files\windows defender\mpcmdrun.exe |
| File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| Product version: | 6.1.7600.16385 |
| Size: | 186.5 KB (190,976 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Tuesday, July 9, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Scheduled tasks
- The job 'MP Scheduled Scan' runs weekly in the path '\Microsoft\Windows Defender\MP Scheduled Scan'
- The task 'Windows Defender Verification' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Verification'
- The job 'Windows Defender Scheduled Scan' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan'
- The task 'Windows Defender Cleanup' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Cleanup'
- The job 'Windows Defender Cache Maintenance' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance'
- Entry path '\Microsoft\Windows Defender\MpIdleTask'
- Entry path '\Microsoft\Windows Defender\MP Scheduled Scan'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Verification'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Cleanup'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.02331851% | |
| Kernel CPU: | 0.01340849% | |
| User CPU: | 0.00991001% | |
| Kernel CPU time: | 19,512 ms/min | |
| Context switches: | 51/sec | |
| Memory |
| Private memory: | 2.49 MB | |
| Private (maximum): | 5 MB | |
| Private (minimum): | 3.7 MB | |
| Non-paged memory: | 2.49 MB | |
| Virtual memory: | 40.82 MB | |
| Virtual memory (peak): | 41.32 MB | |
| Working set: | 4.43 MB | |
| Working set (peak): | 4.78 MB | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 84 | |
Process properties
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\windows defender\mpcmdrun.exe" scan -schedulejob -wintask -restrictprivilegesscan -reinvoke
- "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey b821e308-de49-75a0-e955-a21397ff835b -reinvoke
- "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey cd7af9fc-af8f-0aab-44b7-b8b5ab2edbd2 -reinvoke
|
| Owner: | NETWORK SERVICE |
Threads
Averages
| MpClient.dll |
| Total CPU: | 0.07204242% | |
| Kernel CPU: | 0.04116710% | |
| User CPU: | 0.03087532% | |
| CPU cycles: | 2,002,812/sec | |
| Memory: | 576 KB | |
| MpCmdRun.exe (main module) |
| Total CPU: | 0.01779639% | |
| Kernel CPU: | 0.01779639% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 883,489/sec | |
| Memory: | 204 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 |
29.00% |
|
| Windows 8 Pro |
29.00% |
|
| Windows 8.1 Pro |
13.00% |
|
| Windows 8.1 Pro Preview |
7.00% |
|
| Windows 8 |
4.00% |
|
| Windows 8 Pro with Media Center |
2.50% |
|
| Windows 8 Enterprise |
2.50% |
|
| Windows 8 Enterprise N |
2.00% |
|
| Windows 8.1 Enterprise |
2.00% |
|
| Windows 8.1 Pro with Media Center |
2.00% |
|
| Windows 8.1 Single Language Preview |
2.00% |
|
| Windows 8 Single Language |
2.00% |
|
| Windows 8 Enterprise Evaluation |
2.00% |
|
| Windows 7 Ultimate |
0.50% |
|
| Windows 8.1 Pro Preview with Media Center |
0.50% |
|
Distribution by country
United States installs about 41.71% of Microsoft Malware Protection Command Line Utility.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
26.13% |
|
| Hewlett-Packard |
15.32% |
|
| Dell |
12.61% |
|
| Acer |
11.26% |
|
| Toshiba |
10.81% |
|
| Lenovo |
8.11% |
|
| Sony |
4.50% |
|
| Intel |
3.60% |
|
| GIGABYTE |
3.60% |
|
| Samsung |
2.25% |
|
| Packard Bell |
1.80% |
|
